Is student image privacy a governance issue?

School boards do not need to approve every photograph before it is published. They do need confidence that privacy decisions are being applied consistently and that the school can act quickly when circumstances change.

That makes student image privacy a governance issue.

The risks surrounding student images have changed.

Schools share photographs for positive reasons. Images celebrate achievement, recognise participation and help families feel connected to school life.

However, an image published today does not necessarily remain within the school community.

It can be downloaded, copied, located using facial search technology, collected by automated systems or altered using generative AI. Removing the original post does not guarantee that every copy will disappear.

Image restrictions may also relate to more than personal preference. They can involve custody arrangements, family violence, protection orders, wellbeing concerns or other safeguarding circumstances.

School boards and governing bodies should therefore consider student image privacy as part of their oversight of privacy, safety and risk.

What my research found

My research into how schools manage student images and consent identified a significant gap between the information schools collect and their ability to apply it consistently.

The research found that:

68% of participating schools had accidentally published an image despite consent or privacy restrictions.

Only 12% were confident they could find and remove an image after it had been published.

61% had experienced an increase in image restrictions during the previous year.

These failures are rarely deliberate.

Consent information may be held in enrolment forms, student management systems, spreadsheets, printed lists or within the knowledge of individual staff members. The person publishing a newsletter, updating the website or posting to social media may not have easy access to the latest information. It is easy to see how mistakes happen!

Consent can change

A parent may withdraw permission. A custody arrangement may change. A safety concern may arise. A student may become uncomfortable with their image being shared publicly. I heard all these examples during the research phase.

Good governance means having confidence that these changes can be recorded quickly and acted on across every publishing channel.

What should board members ask?

Board members should ask for assurance rather than become involved in managing individual images.

Four useful questions I feel should be asked:

1. How does the school keep image consent and privacy restrictions current?

2. How does leadership ensure those restrictions are applied wherever images are published?

3. Can the school find previous appearances and act quickly when consent or safety circumstances change?

4. What assurance does the board receive that the process is working?

These questions keep the conversation focused on accountability, risk and evidence.

What does good governance look like?

The board should be confident that:

1. Responsibility for image consent and privacy is clearly assigned.

2. Consent information is reviewed regularly. (side note, I recommend annually)

3. Staff use approved publishing processes and channels.

4. Additional protection can be applied when a student or staff member needs it.

5. Privacy incidents are recorded, addressed and reported appropriately.

You may have defined a policy, but a policy alone does not demonstrate that the process works. Boards also need assurance that the policy is understood and followed.

How AI changes the conversation

Artificial intelligence has made this issue more urgent.

Images can now be found, collected and altered at a speed and scale that was not possible when many school consent processes were developed.

The answer is not necessarily to stop sharing school stories or leave social media altogether. These communications remain valuable to students, families and communities. I have written more about why schools do not need to leave Facebook to protect students here)

The answer is to apply appropriate protection before images are published and retain the ability to respond when circumstances change.

Where technology can help

Hail’s Image Privacy provides one example of how technology can support this governance approach.

It can automate consent requests and renewals, allowing schools to confirm permissions more frequently rather than relying on a decision made at enrolment.

Hail can identify people requiring additional protection, automatically hide their identities where appropriate and help schools locate possible previous appearances when circumstances change.

It also provides a full audit history within the connected Hail workflow, recording where images were shared and what protection was applied. This provides useful evidence for effective governance.

What should the board do now?

Ask school leadership for a short assurance report covering:

1. How image consent is kept current.

2. How restrictions are applied across publishing channels.

3. How the school would respond if a student’s consent or safety circumstances changed tomorrow.

I know how busy schools are. This does not need to become another lengthy reporting process. A short, regular review should give the board the assurance it needs.

Final thought

Student images are personal information, but the issue goes further than compliance.

For some students, controlling where their identity appears is a matter of personal choice. For others, it may be a matter of safety.

Boards do not need to manage every image. They do need assurance that the school’s processes are current, consistent and capable of responding when something changes.

Student image privacy is now part of good school governance.

Stuart Dillon-Roberts